start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
CustomCLSID: HKU\S-1-5-21-2315417832-1755534959-1021809304-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\baleze blaise\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2315417832-1755534959-1021809304-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\baleze blaise\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll => Pas de fichier
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
FirewallRules: [{56CC23EE-39DE-447F-96AF-BF7FC82A6DE9}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe Pas de fichier
FirewallRules: [{44E3498F-8952-4AD4-B0AA-532370682C3B}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe Pas de fichier
FirewallRules: [{0A5DCB3E-8E68-4AA2-99CF-50494A16CDC9}] => (Allow) D:\Programmes\The Sims 4\Game\Bin\TS4.exe Pas de fichier
FirewallRules: [{B0A6F88F-0E1E-4AC5-BF53-EB7B1244B8FE}] => (Allow) D:\Programmes\The Sims 4\Game\Bin\TS4.exe Pas de fichier
C:\Program Files (x86)\The Sims 4
FirewallRules: [{FD18A714-C1DF-44C6-8EE5-B744114E820C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe Pas de fichier
FirewallRules: [{FBCFCC86-61EC-4134-9BC1-47EA3AC54CF4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe Pas de fichier
FirewallRules: [{0A8B10E4-752D-4919-AD08-5E8FF5D7C0D2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe Pas de fichier
FirewallRules: [{E98F5D60-F652-4433-A7B4-36742F9E813F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe Pas de fichier
FirewallRules: [{F52D74DC-A188-496B-9430-53349AE723D8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe Pas de fichier
FirewallRules: [{43DF386E-4331-421C-B497-800893B38AC3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe Pas de fichier
FirewallRules: [{047E097C-3B78-4DF4-B3F7-CF702899CF8A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe Pas de fichier
FirewallRules: [{2B5588E7-4A51-4298-A0F9-E54ABBCFF146}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe Pas de fichier
FirewallRules: [{369A826C-50F9-45F6-BCFD-D94FC8C71F6C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe Pas de fichier
FirewallRules: [{D90FD833-D0B5-4DD2-86C7-463F29FE8C9F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe Pas de fichier
FirewallRules: [{C06B5BB3-88F6-431A-8F7F-5C681155AD7D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe Pas de fichier
FirewallRules: [{0B3B6785-08E7-478C-B5D4-C7D157380455}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe Pas de fichier
FirewallRules: [{3E25AFD5-43CF-4959-9876-4C15BFC8472B}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe Pas de fichier
FirewallRules: [{BDB692F3-52F0-47BA-8A80-6C61F4DE6A25}] => (Allow) C:\Program Files (x86)\Kingsoft\WPS Office\10.2.0.7646\office6\wpscloudsvr.exe Pas de fichier
FirewallRules: [{2550488B-2609-4AE5-8C45-98188E384349}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE Pas de fichier
FirewallRules: [{758D054B-9FA2-42FE-B36D-18B365AD32D0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe Pas de fichier
FirewallRules: [{B51601E2-B10D-4327-AE6C-4F475F92CAD4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe Pas de fichier
FirewallRules: [{A6D932F2-78BF-45F3-A0C2-1DD9C5341971}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe Pas de fichier
FirewallRules: [{97471493-F33B-4D83-9779-7816B3A596CB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe Pas de fichie
FirewallRules: [TCP Query User{785F5F2D-E363-4E27-A1F5-C10E20AAA8DB}C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe] => (Allow) C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe Pas de fichier
FirewallRules: [UDP Query User{6FFDB1D9-8BD4-4ED4-B8CE-111E91691C55}C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe] => (Allow) C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe Pas de fichier
FirewallRules: [TCP Query User{4D1BA3D1-40AE-4CF8-9E78-89B1A5DF51BA}C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe] => (Block) C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe Pas de fichier
FirewallRules: [UDP Query User{D068C571-C0CA-4FD9-B2A6-A0621B296E9C}C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe] => (Block) C:\users\baleze blaise\appdata\local\programs\les-cahiers-du-studio\les cahiers du studio.exe Pas de fichier
FirewallRules: [TCP Query User{4BECE076-F85D-4039-A735-9D2E15805B0F}D:\programmes_install\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe] => (Allow) D:\programmes_install\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe Pas de fichier
FirewallRules: [UDP Query User{9DB23B83-F953-4F32-9415-BA88C478AC97}D:\programmes_install\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe] => (Allow) D:\programmes_install\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe Pas de fichier
FirewallRules: [TCP Query User{495A9309-8B1C-421D-A828-1F7B9C2D4BDF}D:\programmes_install\pd-0.43.4-extended-windowsxp-i386\pd-0.43.4-extended\bin\pd.exe] => (Allow) D:\programmes_install\pd-0.43.4-extended-windowsxp-i386\pd-0.43.4-extended\bin\pd.exe Pas de fichier
FirewallRules: [UDP Query User{158B3FC1-51B4-4B47-BFEA-7D03B279CA3B}D:\programmes_install\pd-0.43.4-extended-windowsxp-i386\pd-0.43.4-extended\bin\pd.exe] => (Allow) D:\programmes_install\pd-0.43.4-extended-windowsxp-i386\pd-0.43.4-extended\bin\pd.exe Pas de fichier
FirewallRules: [TCP Query User{51289C7C-CF13-4A9E-95BC-00ECD683D1B0}D:\programmes_installation_files\vmpk-0.7.0rc-win-x86\vmpk-0.7.0rc-win-x86\vmpk.exe] => (Allow) D:\programmes_installation_files\vmpk-0.7.0rc-win-x86\vmpk-0.7.0rc-win-x86\vmpk.exe Pas de fichier
FirewallRules: [UDP Query User{19F6029B-0E23-4D60-8F8C-527F680041AB}D:\programmes_installation_files\vmpk-0.7.0rc-win-x86\vmpk-0.7.0rc-win-x86\vmpk.exe] => (Allow) D:\programmes_installation_files\vmpk-0.7.0rc-win-x86\vmpk-0.7.0rc-win-x86\vmpk.exe Pas de fichier
FirewallRules: [TCP Query User{A8842A6B-A36F-4870-BE4C-0A734396C329}D:\programmes_installation_files\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe] => (Allow) D:\programmes_installation_files\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe Pas de fichier
FirewallRules: [UDP Query User{4FD9903E-AE49-43D9-99CC-576DCFC3F09A}D:\programmes_installation_files\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe] => (Allow) D:\programmes_installation_files\processing-3.3.6-windows64\processing-3.3.6\java\bin\java.exe Pas de fichier
FirewallRules: [TCP Query User{6CF8203B-86E3-4FCB-A741-4FFD477FC8E0}D:\programmes_installation_files\processing-3.3.7-windows64\processing-3.3.7\java\bin\java.exe] => (Allow) D:\programmes_installation_files\processing-3.3.7-windows64\processing-3.3.7\java\bin\java.exe Pas de fichier
FirewallRules: [UDP Query User{A6840AD3-C7DE-4682-A992-4A358FCC9749}D:\programmes_installation_files\processing-3.3.7-windows64\processing-3.3.7\java\bin\java.exe] => (Allow) D:\programmes_installation_files\processing-3.3.7-windows64\processing-3.3.7\java\bin\java.exe Pas de fichier
FirewallRules: [{278AA61B-9970-428D-9004-8D6E26E94A21}] => (Allow) D:\Programmes\CCleaner\CCUpdate.exe Pas de fichier
FirewallRules: [{51B3E181-BC3C-4961-802C-5A2954622115}] => (Allow) D:\Programmes\CCleaner\CCUpdate.exe Pas de fichier
FirewallRules: [TCP Query User{802C18B3-5D91-4211-B025-F0F7B1E6CF81}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe Pas de fichier
FirewallRules: [UDP Query User{4A3BD775-966F-4DDE-920B-E466F0F9A442}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe Pas de fichier
FirewallRules: [TCP Query User{F8215E66-B9C4-4A5E-8E8B-02095E0C6507}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe Pas de fichier
FirewallRules: [UDP Query User{4C869C12-40BE-4B66-931B-F793B40A576D}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe Pas de fichier
FirewallRules: [TCP Query User{E0955F73-6267-4197-9EF4-96E2340C3F32}C:\users\baleze blaise\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\baleze blaise\appdata\local\programs\opera\65.0.3467.78\opera.exe Pas de fichier
FirewallRules: [UDP Query User{58E7A3C0-9E94-4519-B22B-1C4541AC7FC0}C:\users\baleze blaise\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\baleze blaise\appdata\local\programs\opera\65.0.3467.78\opera.exe Pas de fichier
C:\Program Files (x86)\Kaspersky Lab
GroupPolicy: Restriction ? <==== ATTENTION
Task: {BC8D5CFF-C604-4F82-B825-032237B57D32} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)
2020-03-31 12:05 - 2020-03-31 12:05 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsignea0ae87bf70837cc
2020-03-31 12:04 - 2020-03-31 12:04 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsignc5c019a2ab305f54
2020-03-31 12:04 - 2020-03-31 12:04 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign28d20914fbabe44c
2020-03-31 02:00 - 2020-03-31 02:00 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsignfc9ed728d323683c
2020-03-31 01:55 - 2020-03-31 01:55 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign6c86b4f53658ba7e
2020-03-31 01:55 - 2020-03-31 01:55 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign11583d874a34adee
2020-03-28 20:37 - 2020-03-28 20:37 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign26867c6b6cc309f6
2020-03-20 16:36 - 2020-03-20 16:36 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign60febf29e62f41fa
2020-03-20 16:35 - 2020-03-20 16:35 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign999396f14bc8515d
2020-03-20 16:35 - 2020-03-20 16:35 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign27fd28d4be1e284e
2020-03-20 12:36 - 2020-03-20 12:36 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign7aa80d00cc8a4f3e
2020-03-20 12:13 - 2020-03-20 12:13 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign4303629caebfe37c
2020-03-20 12:13 - 2020-03-20 12:13 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign3b7ee081fdb56196
2020-03-20 12:12 - 2020-03-20 12:12 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign1b8ada53bc6f9e13
2020-03-20 12:11 - 2020-03-20 12:11 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign2e4e2dfde1cb08ee
2020-04-01 10:42 - 2020-04-01 10:42 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign223b8fadc2ec4e0d
2020-04-01 10:41 - 2020-04-01 10:41 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign8f7c4e134989a86a
2020-04-01 10:41 - 2020-04-01 10:41 - 000000000 ____D C:\Users\baleze blaise\AppData\Local\Tempzxpsign5a4076dbc4ad2c61
SystemRestore: On
cmd: ipconfig /flushdns
emptytemp:
end::